$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft File: 32f4e84a-4abf-4422-8d26-57083e3e17cd.mft (raw, json) Hash identifier: TvzxPU8ARsmAOq7+aFhgR55caaXQlvSdJ3u+jWsOoGI= Subject key identifier: AD:1B:F0:50:2B:49:AF:B9:7F:34:F0:AE:79:9A:95:18:95:01:11:A6 Authority key identifier: 5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 Certificate issuer: /CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Certificate serial: 010D0C9F4328584B3C6F1EA775B5DABFDE8D0780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft Manifest number: 010D0C9F43285847015292E43AF8658719E6858D Signing time: Thu 18 Sep 2025 14:00:03 +0000 Manifest this update: Thu 18 Sep 2025 14:00:03 +0000 Manifest next update: Sun 21 Sep 2025 14:00:00 +0000 Files and hashes: 1: 32f4e84a-4abf-4422-8d26-57083e3e17cd.crl (hash: ftfvnm6wRmYEozsq1WmnjHZdK2aUCYymuBOVtKQNa8I=) 2: ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa (hash: G0n1bADtslW45LIiJ0I67i9XHOx3zojgU7Pi1KpDsMA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:6f:1e:a7:75:b5:da:bf:de:8d:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd Validity Not Before: Sep 18 14:00:03 2025 GMT Not After : Sep 21 14:00:00 2025 GMT Subject: CN=5a19b86b-16b4-4df6-9280-65326be2b33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ec:1d:2d:12:2e:bb:bb:ff:13:49:df:b2:bb: 86:3e:d2:24:21:9d:f3:08:2e:ac:12:b3:47:80:6d: a7:ad:8a:68:99:29:ad:92:a9:bd:c0:63:44:8f:45: 59:f3:5f:dc:1f:d4:2b:6b:b4:5e:24:7c:b4:06:60: 1b:a4:2b:9c:6e:c6:03:6e:02:3d:07:28:78:19:94: d8:53:21:10:02:ba:03:70:ad:0e:51:b2:38:1a:7d: 99:d4:0d:f6:77:db:e8:cf:17:8c:aa:c0:35:49:e5: 97:63:e6:39:ae:63:3c:02:26:66:49:7a:5b:05:c9: 4c:43:97:f1:6b:79:b4:85:77:5c:5a:c6:de:0e:89: 16:9a:de:43:2b:13:12:d9:6e:a3:0b:e4:59:c1:d7: 69:5e:16:0c:39:2c:7e:44:bd:c5:7c:83:cc:1d:f2: 19:e2:78:d5:c4:64:45:ea:dd:e4:e0:82:ca:09:bf: b0:6d:bf:5a:0d:82:16:c3:37:f0:c4:4f:2f:cd:0f: 4d:de:af:9c:74:d4:db:20:bf:75:fc:19:4d:ae:db: 1d:69:21:2f:af:fc:dd:22:af:45:65:1f:81:d5:70: 96:0d:af:19:b1:19:ad:48:cc:99:e3:3c:5e:f2:a0: 3b:5a:50:2f:0a:6b:ef:1f:45:76:ac:d1:79:a0:45: c5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1B:F0:50:2B:49:AF:B9:7F:34:F0:AE:79:9A:95:18:95:01:11:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl X509v3 Authority Key Identifier: keyid:5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:42:31:53:0f:7c:39:c5:ce:8d:4b:21:6a:7c:75:6b:11:87: 8f:ff:76:5b:4f:00:45:27:72:e7:1a:b1:8c:1c:1b:6a:e6:dc: 95:cd:f1:06:1b:9c:1e:57:3e:93:1f:ef:dc:26:92:ad:ac:ed: 2c:68:9c:26:61:c2:cf:22:64:60:af:27:cf:50:b8:39:bf:7c: a4:59:fa:01:25:8c:34:f9:a9:03:07:6a:29:24:ab:ae:e2:62: ba:28:7b:83:e7:ab:fe:dd:69:06:f4:c6:76:01:38:41:d3:16: 30:b3:35:a1:81:4f:aa:01:11:17:c5:ab:48:4d:3b:11:80:88: d6:73:4d:26:e2:57:de:56:b3:64:56:26:75:16:13:02:55:ea: 94:fe:82:e9:ee:8a:53:7e:40:32:b0:ae:99:ae:17:54:43:b9: 55:eb:c6:6d:ca:eb:83:b0:9d:73:ac:74:0a:58:2b:d2:b0:79: 3a:0e:bf:c6:86:5c:ec:fd:3e:d4:1e:54:e0:79:ff:f2:b9:a4: 86:6c:01:2c:49:41:2d:9f:30:7d:21:f8:61:7d:f1:61:87:62: b7:32:94:27:5a:b6:41:35:ac:8b:9b:43:76:d2:da:ac:fb:62: 32:d5:5f:9c:ed:bd:c0:b8:7e:28:41:54:8a:dd:16:dd:95:6a: 38:12:a9:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEs8bx6ndbXav96NB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJmNGU4NGEtNGFiZi00NDIyLThkMjYtNTcwODNlM2Ux N2NkMB4XDTI1MDkxODE0MDAwM1oXDTI1MDkyMTE0MDAwMFowLzEtMCsGA1UEAxMk NWExOWI4NmItMTZiNC00ZGY2LTkyODAtNjUzMjZiZTJiMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuwdLRIuu7v/E0nfsruGPtIkIZ3zCC6sErNH gG2nrYpomSmtkqm9wGNEj0VZ81/cH9Qra7ReJHy0BmAbpCucbsYDbgI9Byh4GZTY UyEQAroDcK0OUbI4Gn2Z1A32d9vozxeMqsA1SeWXY+Y5rmM8AiZmSXpbBclMQ5fx a3m0hXdcWsbeDokWmt5DKxMS2W6jC+RZwddpXhYMOSx+RL3FfIPMHfIZ4njVxGRF 6t3k4ILKCb+wbb9aDYIWwzfwxE8vzQ9N3q+cdNTbIL91/BlNrtsdaSEvr/zdIq9F ZR+B1XCWDa8ZsRmtSMyZ4zxe8qA7WlAvCmvvH0V2rNF5oEXFPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK0b8FArSa+5fzTwrnmalRiVARGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0 ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4M2UzZTE3Y2QvMzJmNGU4NGEtNGFiZi00 NDIyLThkMjYtNTcwODNlM2UxN2NkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzJmNGU4NGEtNGFiZi00NDIyLThk MjYtNTcwODNlM2UxN2NkLzMyZjRlODRhLTRhYmYtNDQyMi04ZDI2LTU3MDgzZTNl MTdjZC5jcmwwHwYDVR0jBBgwFoAUW6uHkmFiU8gEFTo/2CsWSVihrqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zMmY0ZTg0YS00YWJmLTQ0MjItOGQyNi01NzA4 M2UzZTE3Y2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFQjFTD3w5xc6NSyFqfHVr EYeP/3ZbTwBFJ3LnGrGMHBtq5tyVzfEGG5weVz6TH+/cJpKtrO0saJwmYcLPImRg ryfPULg5v3ykWfoBJYw0+akDB2opJKuu4mK6KHuD56v+3WkG9MZ2AThB0xYwszWh gU+qAREXxatITTsRgIjWc00m4lfeVrNkViZ1FhMCVeqU/oLp7opTfkAysK6ZrhdU Q7lV68ZtyuuDsJ1zrHQKWCvSsHk6Dr/Ghlzs/T7UHlTgef/yuaSGbAEsSUEtnzB9 IfhhffFhh2K3MpQnWrZBNayLm0N20tqs+2Iy1V+c7b3AuH4oQVSK3RbdlWo4EqlS -----END CERTIFICATE-----Generated at Thu Sep 18 22:09:11 2025 by rpki-client